questions mailing quarantined files

Sean Embry sean at NISD.NET
Fri Jul 29 21:40:21 IST 2005

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

This is my set up:
Mail enters and leaves via the Mail Scanner box. The Mail Scanner is the
MX for my domain, and my internal systems use the MailScanner box as
their smart host. The internal boxes are protected by an ACL that only
allowes the MailScanner box to connect to them, restricted by an ACL.
The problem:
Someone receives a file on the MailScanner. The file gets quarantined for
whatever reason.
I want to be able to email that file in regardless of the quarantine, but
I only want someone with root privs to be able to do that.
EG: someone uses
formail -s procmail -d [username] < message
(I'm doing that with an eye to setting up a web page where the user can
retreive the file.)
We used to be able to do this on the 4.12-2 box, but on our new 4.43.8-1
box this no longer works.
It gets bounced just as if it were sent from the internet, whereas the
old box was quite happy to allow it.
Also, I've noticed on the old box, the headers for the internal forwards
look thus:
Return-path: <abuse at>
Received: from
 ( [])
 by; Wed, 06 Jul 2005 13:42:07 -0500
Received: (from abuse at localhost)
 by (8.11.6/8.11.6) id j66IdMI10273
 for abuse at; Wed, 6 Jul 2005 13:39:22 -0500
Received: from ( [])
 by (8.11.6/8.11.6) with ESMTP id j66IdKm10259
 for <abuse at>; Wed, 6 Jul 2005 13:39:20 -0500
Our new headers appear thus:
Return-path: <abuse at>
Received: from
 ( [])
 by; Fri, 29 Jul 2005 12:35:15 -0500
Received: from ( [])
 by (8.13.1/8.13.1) with ESMTP id j6THZ2aH013183
 for <abuse at>; Fri, 29 Jul 2005 12:35:07
Received: (from abuse at localhost)
 by (8.13.1/8.13.1/Submit) id j6THZ2PT013182
 for abuse at; Fri, 29 Jul 2005 12:35:02 -0500
Received: from ( [])
 by (8.13.1/8.13.1) with ESMTP id j6THYooL013160
 for <abuse at>; Fri, 29 Jul 2005 12:34:56 -0500
This looks like the system is scanning the local mail too now, so each
email is getting scanned twice. If that's the case, what should I do
about that?
Just to be clear, the only users that will ever be local on this box are
system admins.
And a last word:
Happy Sys Admin day, and especially Julian for all the hard work. Thanks
Julian! ($BEVERAGE of your choice awaits you when first we meet)

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (
and the archives (

Support MailScanner development - buy the book off the website!

More information about the MailScanner mailing list